Our site is being HACKED! :(

admin · #1 (**permalink**) 17th Oct 2006, 8:45 pm

Hi all,

As some of you may have noticed, our site has been hacked numerous times now.

What I don't understand is WHY someone would want to hack a FREE site with a great community of people who are willing to help others!? It's also not fair that that this has happened too. We are not some greedy corporate making huge amounts of money either.

This is a free site, largely funded by myself, donations and Google advertising. We don't make money and provide the site as a way to help others with the same interest and to help solve problems.

It really annoys me that this site continues to be hacked all the time.

If anyone can make any recommendations on how to fix/patch the site from further hacking, would love to hear from you.

Also, if anyone can recommend a product that provides similar functionality and features as this site, please make a suggestion. We would like to consider moving to another system if it's less hackable.

Zephyron · #2 (**permalink**) 18th Oct 2006, 4:05 am

Bloody hackers :evil: May they burn in the eternal dept of hell's most inner circle!! Will ask a friend of mine for a nice anit-hack software.. He is a hacker too.

Que · #3 (**permalink**) 18th Oct 2006, 12:54 pm

What a bunch of loosers, those turk hacker boys. Sorry that this provider can't get his services save, is it the forum-software itself that is dubious, or his safety policies? That's the question. I do not want to know what shit those guys may have put on the server, keyloggers, acces to all the usernames, passwords, emailadresses. Shortly after visiting here yesterday, I got a total portscan which lead back to China, reported it, but it is probably just some pc they took over from somewhere else.

GO HACK SOME ISRAELI SITES HACKERBOYS but you are probably to scared to do that, hence the mossad will get to you for sure.

rictic · #4 (**permalink**) 18th Oct 2006, 1:15 pm

wouldn't surprise me if it was the manufacturers of the fake storage mp3players.

korn88 · #5 (**permalink**) 18th Oct 2006, 1:41 pm

They are not hackers.. they are just kids that found a vulnerability for phpBB and then searched for not updated sites (that still have the vulnerability).

Although they call themselves hackers, this is not hacking, it is defacing.. and as it is very easy to find the necessary exploits to perfom this type of attacks to some sites, they just choose a group of sites randomly from google and attack them.

Just update your phpBB version (and also all the mods you are using) and we are not going to see this people again in a long time

(if you keep up to date the site :P)

Good luck!

Que · #6 (**permalink**) 18th Oct 2006, 1:43 pm

Quote:

Originally Posted by rictic";p=&quot

wouldn't surprise me if it was the manufacturers of the fake storage mp3players.

LOL
no, they pop up everywhere as a group. You can find their forum when you search for the usernames that showed here during the hack, ShaFuck31 & SaboTaqe

Smeag · #7 (**permalink**) 18th Oct 2006, 9:12 pm

Didn't do an in-depth research...maybe the one listed in this page is the same?
Couldn't find this page as a victim though..

http://www.zone-h.org/component/opti...aFuck31/page,1

anyway, I strongly recommend that you upgrade the phpBB version as korn88 said...

admin · #8 (**permalink**) 19th Oct 2006, 12:16 am

We'll, after being told by the person who hacked the site what to look for, I did some research on the internet and found a lot of information about the vulnerability.

Hopefully this has now been fixed.

Fingers cross and let's see what happens.

P.S>> I've also updated phpBB to the latest security version awhile ago as well, but the hacking still continues... Hopefully we have minimised the hacking.

bsaylors · #9 (**permalink**) 19th Oct 2006, 4:09 am

Yeah, almost everyday we see the site being hacked. Even from back in the day, most of the web guys know that PhpBB is very easily hackable due to the security holes it has. hopefully the upgraded system will block those attempts and protect the forum as it is highly essential for people like me who are ADDICTED! haha

Que · #10 (**permalink**) 19th Oct 2006, 4:43 am

Beware! And please confirm if this happened to you also:
After seeing the site yesterday night (european timezone here), it was back up, with a banner on top of a red flag.
Right after I closed the page, I got a virus warning:
Trojan detection:
TR/Dldr.VB.alb.1 is a malicious file that is trying to download from the net:
– The location is the following:
• http://zhmbscwdgk.biz/dl/**********
It is saved on the local hard drive under: c:\11.exe Furthermore this file gets executed after it was fully downloaded. Further investigation pointed out that this file is malware, too. Detected as: TR/Dldr.VB.alb.1
http://original.avira.com/en/threats...2_details.html

It was in the browser's cachefolder, hidden in a jpeg-file. In an earlier post above is a link, showing hacks/infections spread by one of them, mostly by placing infected images on websites, holding the malware.

So update your antivirus program daily, don't be as the guy who's home-pc was delivered to me for repair that held over 200 forms of virii, spy- and other malware, (duhh do I really need antivirus software and a firewall?) including a keylogger that sent all the keystrokes to somewhere else. So lucky he was only internetbanking from his work!